Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Organize package changes and releases in monolith repositories.
npm i -D auri
yarn add -D auri
pnpm add -D auri
Run commands:
npx auri
pnpm auri
yarn auri
Auri does not work on certain repository setups:
npm run build && npm publish
.package.json
is in the repository root.In addition, it's built with a few opinions in mind:
Install Auri via NPM and update your repository.
You'll will need an NPM automation access token (classic) and a GitHub token with the following permissions:
repo
user:email
Create a GitHub workflow that runs on every push. The NPM token should be named NODE_AUTH_TOKEN
and the GitHub token as AURI_NPM_TOKEN
.
It is crucial that you setup actions/checkout@v3
with github.ref
. Auri expects the current branch to be the target branch.
# .github/workflows/publish.yaml
name: "Publish package"
on: [push]
env:
AURI_GITHUB_TOKEN: ${{secrets.AURI_GITHUB_TOKEN}}
AURI_NPM_TOKEN: ${{secrets.AURI_NPM_TOKEN}}
jobs:
publish-package:
name: Publish package with Auri
runs-on: ubuntu-latest
# TODO: Update repository name.
if: github.repository == pilcrowonpaper/auri && github.ref == 'refs/heads/main'
permissions:
id-token: write
steps:
- name: Setup actions
uses: actions/checkout@v3
with:
ref: ${{ github.ref }}
- name: Setup Node
uses: actions/setup-node@v3
with:
node-version: 20
registry-url: "https://registry.npmjs.org/"
cache: "npm"
- name: Publish package and release
run: npm run auri publish
Go to your repository's settings, and go to "Code and automation" > "Actions" > "General." Go to "Workflow permissions" and enable:
If your GitHub workflow have permissions
defined, make sure content
is set to write
:
permissions:
contents: write
When you're ready to publish your package, run auri generate
on your local machine. This will create a .COMMITS
file with a list of commits since the last release (the version in package.json). Commits starting with docs:
, style:
, or test:
will be ignored. This will also create a .RELEASE.md
. Using .COMMITS
as a reference, write your changelog in .RELEASE.md
. Update the version field in your package.json and commit the change.
With the GitHub action, Auri will build and publish your package to NPM and use the .RELEASE.md
to publish a new GitHub release.
FAQs
Organize package changes and releases
The npm package auri receives a total of 524 weekly downloads. As such, auri popularity was classified as not popular.
We found that auri demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.